audit-labs/gh-attest

 1-- Repos an installation has opted out of: they are skipped by the poller and
 2-- filtered out of the evidence query, so an excluded repo neither costs
 3-- subrequests nor reports a gap. Snapshots already collected for the repo are
 4-- left in place — an exclusion is a reporting decision, not a deletion, and
 5-- removing the exclusion restores the history.
 6CREATE TABLE repo_exclusions (
 7  installation_id INTEGER NOT NULL,
 8  repo TEXT NOT NULL,             -- full name, e.g. 'acme/api'
 9  excluded_at TEXT NOT NULL,
10  PRIMARY KEY (installation_id, repo),
11  FOREIGN KEY (installation_id) REFERENCES installations(installation_id)
12);